Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier: ztUbGOoUntOkwHKUNdGsTeHk4LUMwwwPhxDubm7Ello=
Subject key identifier: 76:87:C8:97:12:7F:FA:49:1F:D1:69:A1:73:15:D4:51:18:31:55:E6
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer: /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial: 019A71B79EE596AD3EDC4FE95CD59FCA014D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number: 067E
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: YGD3MFSQ1a8NpUgZgSrgJ/PftAvFFDQ30O1fBd6Gjks=)
2: AuXo05ybv8icHHWqDyU8sDSnZ1Y.roa (hash: UxOR6qET+hxOD3wGEyopUX9auNkRzvxhrEq1sLIBOVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:e5:96:ad:3e:dc:4f:e9:5c:d5:9f:ca:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=7687c897127ffa491fd169a17315d451183155e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:c1:80:43:b9:39:15:67:ef:6c:79:14:7b:
34:b1:3a:70:c2:35:6a:ac:8c:e4:0a:92:a7:9d:1d:
d8:a7:8a:da:56:de:9b:bd:81:3d:6f:cf:a3:ef:8b:
d3:68:02:af:04:1b:51:b2:c3:99:52:95:2d:49:0c:
dd:e5:20:f1:9b:9a:72:85:6a:26:ce:61:62:91:f8:
4b:ab:29:53:fb:01:6f:67:e9:bd:9c:da:76:3d:f2:
5b:47:25:06:29:e8:bf:b2:e1:c2:da:ce:a8:c9:7b:
04:07:a9:a3:cb:85:13:01:20:a1:70:33:06:6d:6e:
59:15:3a:8b:20:01:05:46:2d:f4:c6:ab:5c:b2:bb:
65:c2:0a:cc:b8:f1:8c:a4:05:e3:48:98:2e:a9:57:
0e:65:dc:f8:37:bc:49:f6:12:71:ed:7b:72:dd:45:
f7:e6:51:27:75:d7:49:a4:8a:9a:83:7c:33:1c:93:
04:43:63:6b:f1:0e:f5:90:2c:34:a0:20:ce:57:9d:
77:6b:28:c8:9b:e2:09:1d:34:7b:78:03:65:f6:2e:
10:6e:93:a2:99:89:3d:74:21:e3:2b:42:e8:cc:3f:
82:01:63:b6:f6:24:b2:ac:55:06:a2:84:0b:47:94:
55:6d:c8:e3:36:a3:79:93:eb:81:7c:a4:ed:79:b1:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:C8:97:12:7F:FA:49:1F:D1:69:A1:73:15:D4:51:18:31:55:E6
X509v3 Authority Key Identifier:
keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fc:54:0d:0f:41:ba:8f:cf:78:84:75:06:af:0a:8c:63:d8:
1e:48:79:6e:d8:f4:12:40:2f:31:5d:2e:fe:3b:d2:4c:d3:05:
f4:0f:07:d4:60:82:53:58:78:35:61:66:8c:6e:62:cc:24:4b:
9f:40:c3:de:2b:02:36:cf:43:50:56:38:a4:ee:6b:a4:56:68:
e6:d6:5f:f6:98:e5:f5:5d:ec:1a:b8:d5:7f:b8:50:e9:d7:cb:
dd:77:85:66:8b:87:15:87:91:14:0b:86:d9:6a:b3:3a:66:7b:
c8:5a:27:b9:37:02:c0:33:5a:53:aa:5e:04:a2:bd:18:41:d1:
7e:21:2b:92:e6:e6:a7:d2:9f:f9:e0:2f:a3:54:6c:0d:60:50:
29:57:19:03:40:ef:b7:10:ad:ef:74:15:40:26:36:46:bc:98:
a9:f1:7d:c4:db:6d:cd:a0:ba:48:cc:a8:73:ed:ec:6f:45:95:
58:48:87:c2:01:af:68:5e:b4:62:58:44:15:49:4b:e3:cc:c2:
91:93:e3:2d:23:f3:92:19:12:be:9e:3c:05:58:2a:a6:cb:6e:
c6:c8:b4:8e:c7:44:a3:08:a7:41:7d:21:06:a2:50:b1:48:c8:
0b:73:ae:61:41:99:09:65:1e:33:e3:69:2e:6a:85:4a:dd:6c:
a4:2d:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:33 2025 by rpki-client